What are CIS Benchmarks and how are they used for hardening?

Center for Internet Security Benchmarks are consensus-based configuration guidelines that provide specific, actionable hardening recommendations for operating systems, applications, cloud platforms, network devices, and mobile devices. Each benchmark contains hundreds of settings organized into two profiles: Level 1 for general security suitable for most environments, and Level 2 for higher security environments where operational impact is acceptable.